Legal
OhBe - Last updated: June 2026
This Privacy Policy explains how OhBe (trading name of Obi Spencer, sole trader) collects, uses, stores, and protects personal data. OhBe is committed to handling your data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. By using the OhBe website, submitting an enquiry, or signing up to our mailing list, you acknowledge that you have read and understood this policy.
OhBe is a London-based creative business operated as a sole trader by Obi Spencer.
Data Controller: Obi Spencer, trading as OhBe
Email: hello@ohbe.co.uk
Location: London, United Kingdom
As a sole trader, Obi Spencer is the data controller responsible for your personal data.
When you submit a project enquiry through the OhBe website, we collect the following personal information:
We do not collect phone numbers through the enquiry form unless you include one in your message.
When you visit the OhBe website, the following data may be automatically collected via third-party analytics and tracking tools (see Section 6):
If you are given access to the OhBe client portal, we process:
Portal access is for active or former clients and partners. We do not make portal accounts publicly available.
If you choose to join the OhBe mailing list via the website popup or any other signup form we offer, we collect:
We do not add anyone to the mailing list without this opt-in. Signing up to the mailing list is separate from submitting a project enquiry, you are not subscribed to marketing emails simply by contacting OhBe about a project unless you separately opt in.
OhBe's website uses cookies. See Section 7 for full details.
OhBe uses your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Responding to your project enquiry | Legitimate interest / Pre-contractual steps |
| Providing a personalised quote | Pre-contractual steps |
| Communicating about your project | Performance of a contract |
| Operating the client portal (files, invoices, messages) | Performance of a contract / Legitimate interest |
| Improving the website experience | Legitimate interest |
| Advertising and retargeting (with consent) | Consent (via cookie banner) |
| Analytics and site performance monitoring | Consent (via cookie banner) |
| Sending marketing emails (mailing list) | Consent (explicit opt-in at signup) |
We will never use your data for purposes incompatible with those listed above. We will not send you marketing emails unless you have opted in, and you may withdraw that consent at any time (see Section 8).
| Data Type | Retention Period |
|---|---|
| Enquiry form submissions (not converted to client) | 12 months from date of submission (website copy); Formspree inbox per their retention |
| Enquiry copies stored in OhBe admin systems | 12 months unless the enquiry becomes an active project |
| Client project data (converted enquiries) | 6 years from project completion (in line with sole trader tax record requirements) |
| Client portal files and invoices | For the duration of the client relationship, then up to 6 years where required for tax or legal records |
| Portal login records | While the account remains active, then deleted within 90 days of closure unless retention is required by law |
| Analytics data | As set by the third-party provider (see Section 6) |
| Cookie data | As set by each cookie type (see Section 7) |
| Mailing list subscribers | Until you unsubscribe or ask us to delete your details, then removed within 30 days |
After the relevant retention period, your data will be securely deleted.
OhBe does not sell, rent, or trade your personal data to any third party.
Your data may be shared with the following categories of third parties only where necessary to operate the service:
All third-party providers are required to handle your data securely and in accordance with applicable data protection laws.
The OhBe website uses the following third-party tools:
Provider: Google LLC
Purpose: Website traffic analysis, pages visited, session duration, traffic sources, device type
Data collected: Anonymised usage data, approximate location, device information
Retention: Up to 26 months (default Google Analytics setting)
Privacy policy: policies.google.com/privacy
Opt-out: tools.google.com/dlpage/gaoptout
Provider: Google LLC
Purpose: Manages the deployment of analytics and tracking scripts on the website. Does not itself collect personal data, it controls when other tags (such as Google Analytics and Meta Pixel) fire.
Note: Google Tag Manager is configured to only fire tracking tags after cookie consent has been given.
Provider: Meta Platforms, Inc.
Purpose: Tracks website visitor behaviour to enable retargeted advertising on Facebook and Instagram, and to measure the effectiveness of any OhBe advertising campaigns
Data collected: Pages visited, actions taken on the site, browser and device data, IP address
Data transfer: Meta may transfer data outside the UK/EEA
Privacy policy: facebook.com/privacy/policy
Opt-out: facebook.com/ads/preferences
The Meta Pixel and Google Analytics will only activate after you have given your explicit consent via the cookie consent banner on the OhBe website.
Provider: Formspree, Inc.
Purpose: Securely receives and forwards project enquiries, client portal messages, and mailing list signups submitted through OhBe website forms
Data collected: The fields you submit in each form (e.g. name, email, message, or mailing list email and consent confirmation)
Data transfer: Formspree may process data in the United States; appropriate safeguards apply under their terms
Privacy policy: formspree.io/legal/privacy-policy
Provider: Vercel Inc.
Purpose: Hosts the OhBe website and serverless APIs used for the client portal, enquiry logging, and mailing list signups
Privacy policy: vercel.com/legal/privacy-policy
Provider: Cloudflare, Inc.
Purpose: Encrypted object storage for client portal files, invoices, mailing list records, enquiry copies, and related portal configuration
Privacy policy: cloudflare.com/privacypolicy
Provider: Calendly LLC
Purpose: Lets clients book production calls and sessions from the client portal
Data collected: Name, email, and booking details you enter in the Calendly widget
Privacy policy: calendly.com/privacy
Cookies are small text files stored on your device when you visit a website. OhBe uses cookies to improve your experience and to understand how visitors use the site.
| Category | Description | Examples | Consent Required |
|---|---|---|---|
| Strictly Necessary | Essential for the website to function. Cannot be disabled. | Session cookies, security cookies | No |
| Analytics | Help us understand how visitors interact with the site. Anonymised where possible. | Google Analytics cookies (_ga, _gid) | Yes |
| Marketing / Advertising | Used to show relevant adverts and measure ad performance. | Meta Pixel cookies (_fbp, _fbc) | Yes |
When you first visit the OhBe website, a cookie consent banner will appear. You can choose to accept all cookies, reject non-essential cookies, or customise your preferences.
You can also manage or delete cookies at any time through your browser settings:
Please note that disabling certain cookies may affect the functionality of the website.
As a UK resident, you have the following rights regarding your personal data:
| Right | What It Means |
|---|---|
| Right of access | You can request a copy of the personal data OhBe holds about you |
| Right to rectification | You can ask us to correct inaccurate or incomplete data |
| Right to erasure | You can ask us to delete your personal data ("the right to be forgotten") |
| Right to restrict processing | You can ask us to limit how we use your data |
| Right to data portability | You can request your data in a structured, machine-readable format |
| Right to object | You can object to processing based on legitimate interest |
| Right to withdraw consent | Where processing is based on consent, you can withdraw it at any time |
To exercise any of these rights, contact OhBe at hello@ohbe.co.uk. We will respond within 30 days of receiving your request.
If you are on the OhBe mailing list, you may withdraw consent and stop receiving marketing emails at any time by:
We will process unsubscribe requests promptly and will not send further marketing emails after your request has been actioned. Withdrawing consent for marketing does not affect emails we must send about an active project or booking (e.g. quotes, deliverables, invoices).
OhBe takes reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include:
While we take data security seriously, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to affect your rights, we will notify you and the Information Commissioner's Office (ICO) as required by UK GDPR.
Some of the third-party providers listed in Section 6 (including Google and Meta) may transfer and process your data outside the United Kingdom. Where this occurs, OhBe ensures that appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms recognised under UK GDPR.
OhBe's website and services are not directed at children under the age of 16. OhBe does not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact hello@ohbe.co.uk and we will delete it promptly.
The OhBe website may contain links to third-party websites (such as Instagram or LinkedIn). OhBe is not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies when you visit them.
If you believe OhBe has not handled your personal data in accordance with this policy or UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, always appreciate the opportunity to address your concerns directly first. Please contact us at hello@ohbe.co.uk before escalating to the ICO.
OhBe may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.
For any questions, requests, or concerns about this Privacy Policy or how OhBe handles your data:
Email: hello@ohbe.co.uk
Trading name: OhBe
Operator: Obi Spencer (Sole Trader)
Location: London, United Kingdom